Created attachment 473527 [details] [diff] [review] patch The variable is nsIContent*, but scripts may run before it is used. I don't have a testcase, but based on code this might lead to crash when using image maps and deleting the image element when it gets focus. Or something like that.
Comment on attachment 473527 [details] [diff] [review] patch Approved for 18.104.22.168 and 22.214.171.124, a=dveditz
http://hg.mozilla.org/mozilla-central/rev/99aa53d645ca http://hg.mozilla.org/releases/mozilla-1.9.1/rev/2d8e67f58719 http://hg.mozilla.org/releases/mozilla-1.9.2/rev/b48f479bfc99